Who touches a file we hold. This is our list, not the processor’s subprocessor list.
How to read this
Payment companies at the top of the market publish a subprocessor list because they are processors. We are not. Card data, settlements, and chargebacks are processed by the processor and its sponsoring bank under their DPA and their list. What follows is who we use to run this website, this inbox, and this shop.
Site and shop
WordPress.com (Automattic) hosts the public site. Elementor renders the pages. WooCommerce runs the shop catalog. Jetpack, Jetpack Boost, Akismet, and Site Mailer are Automattic services on the same host. Cloudflare sits in front of the host. Cookie Consent (Cookiez) stores a cookie choice. Yoast writes the public meta tags. Image optimization compresses uploads.
Inbox, CRM, and mail
Jetpack CRM holds merchant records we create. MailPoet can send mail you asked for. HubSpot (Leadin) is installed; we do not use it as a public live-chat desk. Google Site Kit and Google Listings & Ads are installed for measurement and merchant listings when those products are connected. Trustpilot may collect a review you choose to leave.
The processor
If you board, the processor named in your merchant agreement — and its bank, card networks, and gateways — process cardholder data. That is not this list. Ask them for their current subprocessor list and DPA.
Changes
Material additions to this list will be dated on this page. Questions: privacy@theplacetoshoplocal.com.
